VBS/Loveletter.a
Alias: "Love Bug"
Subject: ILOVEYOU
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: Also known as I-Worm.Loveletter, IRC/Loveletter, Loveletter, Troj/LoveLet-A, VBS.Loveletter.a
VBS/Loveletter.b
Alias: "Susitikim" "Lithuania"
Subject: Susitikim shi vakara kavos puodukui...
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: The subject line is Lithuanian for "Let's meet this evening for a cup of coffee"
VBS/Loveletter.c
Alias: "Very Funny", "Joke"
Subject: Fwd: Joke
Body: blank
Attachment: Very Funny.vbs
Note: Also sends Very Funny.HTM
VBS/Loveletter.d
Alias: None
Subject: Same as A
Body: Same as A
Attachment: Same as A
Notes: This is a slight variation on Loveletter.a.
VBS/Loveletter.e
Alias: "Mother's Day"
Subject: Mothers Day Order Confirmation
Body: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this email. Please print out the attachment and keep it in a safe place.Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com
Attachment: mothersday.vbs
Notes: This variant deletes files with the extension ".ini" and ".bat" as opposed to ".jpg" and ".jpeg". This means users will be unable to reboot their machines. VBS/Loveletter.e does not download the "WIN-BUGSFIX.exe" from the Internet, but it does modify the Internet Explorer start page.
Variants : f to i Phoney Symantec warning and 'Important!' virus variants.
Variants : j to m "I Can't Believe This!", Arab Air and other virus variants.
Variants : n to s Yeah, Yeah, LOOK!, Bewerbung, and more virus variants
Go to ZDNet's ILOVEYOU Special Report
